IN THE UNITED STATES ARMY 
FIRST JUDICIAL CIRCUIT 



UNITED STATES 



v 



MANNING, Bradley E. 5 PFC 



U.S. Army. 



(b) (6) 



Headquarters and Headquarters Company, U.S. 

Army Garrison, Joint Base Myer-Henderson Hall. 
FortMyer,VA 22211 



DEFENSE FORENSIC REQUEST 
OF RELEVANT COMPUTERS 



DATED: 26 March 2012 



1 . The Defense, in consultation with its computer forensic experts, requests the following 
process be performed in order to facilitate the Court's Order compelling the Government to 
immediately cause an inspection of 1 4 hard drives from the Tactical Sensitive Compartmented 
Information Facility (T-SCIF) and the Tactical Operations Center (TOC) of Headquarters and 
Headquarters Company (HHC), 2 nd Brigade Combat Team (BCT), 10 th Mountain Division, 
Forward Operating Base (FOB) Hammer, Iraq: 

a. The Government provides the Court and Defense with a list of the approv ed programs for 
the Distributed Common Grounds System Army (DC GS - A) computer; 

b. The Government* s forensic experts provide the Defense with an EnCase Folder Structure 
in .rtf format that includes the filenames within each of the following folders for every identified 
user profile on each hard drive: 

(1) Program Files; 

(2) User Profile Storage regarding: Documents, Music, Games, Pictures, Local 
Settings\Appli cation Data etc.; 

(3) Windows\Prefetch 

2. The requested process will accurately identify any unauthorized music, movies, games, or 
other programs. The process will not, however, reveal any content of any file. Thus, the 
information revealed will not be classified, and will not necessitate a review by any Original 
Classification Authority (OCA). 

3. The above process can easily be completed within a matter of a few days. The process will 
also eliminate the need for the Government to search each computer for every conceivable form 
of unauthorized media (music, movies, games and other programs). Moreover, this process 
avoids the Defense having to guess at what, of the millions of software programs out there, might 
be found on the relevant computers. 
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4, The point of contact for this memorandum is the undersigned a^BISnS^^^I or by 



(b) (6) 



Respectfully submitted, 




DAVID EDWARD COOMBS 
Civilian Defense Counsel 
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U N CLASS! RED//FOR OFFICIAL USE ONLY 



30 March 2012 



MEMORANDUM FOR RECORD 



SUBJECT; Security Expert Review of Defense Motions 



1. I hereby certify that I have reviewed the following Defense motions for the presence of 
cl ass if i ed informati on : 



a) Defense Request for Search Terms of Relevant Computers; and 

b) Defense Renewal of Motion to Compel Discovery of Computers: 



1 do not believe that either of these motions contains classified information or information that a 
reasonable person could believe to be classified. 



2, The point of contact for this memorandum is fee undersigned at 



(b) (6) 



(b) (6) 



IS Division 
1NSCOM G2 
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30 March 201 2 



MEMORANDUM FOR RECORD 



SUBJECT: Security Expert Review of Defense Motions 



1. I hereby certify that I have reviewed the following Defense motions for the presence of 
classified information: 



a) Defense Request for Search Terms of Relevant Computers; and 

b) Defense Renewal of Motion to Compel Discovery of Computers; 



I do not believe that either of these motions contains classified information or information that a 



reasonable person could believe to be classified. 
2. The point of contact for this memorandum iSytne undersigned at] 



(b) (6) 



(b) (6) 



IS Division 
INSCOM G2 



From: 

To: 

Cc: 



Subject: 
Date- 
Attachments; 



David Coombs 

Ltnd. Peruse R CQL MIL USA QTJAG 

"Kemkes. Matr-iew J MA3 US ARMY fUSV : "Bouchard. Pau' R CPT USARMY fUSV ; ei Santiago. ...Malissa 5 CW2 

USARMYfUSV : Morrow TIT, JoDean, CPT USA JFHQ-MCR/MDW 5JA; Overaaard. Angel M. CPT USA JFHO- 
MCR/MDW SJ A: Whvte Jeffrey H. CPT USA JFHO-NCR/MDW SJA: Ford. Arthur D. CW2 USA JFHO-NCR/Hr>W 
SI' liaMi3^^^^^B T P^"n^"~ Jav R CFV fUSV : Williams. Patricia CIV J FHQ -NCR/MOW SJA : Fr;n. 



Ashcfert MAJ USA JFHO-NCR/MDW SJA 

Search of T-SCIF and TOC Computers 

Friday, March 30, 2012 11:05:21 AM 

Discovery Renewal * Computers, odf 
Def. Prnnram list.Rdf 

Security Expert Review, txlf 



Ma'am, 

The Defense has attached the following motions: 

a) Defense Request for Search Terms of Relevant Computers; and 

b) Defense Renewal of Motion to Compel Discovery of Computers. 

The Def ense has also attach ed the review of both motions by its security 
expert ^^^^^^^^H 

v/r 
David 

David E. Coombs, Esq. 

Law Offioe of David E. Coombs 



(b) (6) 



***Confidentiality Notioe: This transmission, including attachments, may 
contain confidential attorney dient information and is intended for the 
person(s) or company named. If you are not the intended recipient, please 
notify the sender and delete all copies. Unauthorized disclosure, copying 
or use of this information may be unlawful and is prohibited*** 



